SentinelOne Acquires Attivo Networks, Bringing Identity to XDR Learn More
SentinelOne Acquires Attivo Networks, Bringing Identity to XDR
Experiencing a Breach?
  • 1-855-868-3733
  • Contact
  • Cybersecurity Blog
en
  • English
  • 日本語
  • Deutsch
  • Español
  • Français
  • Italiano
  • Dutch
  • 한국어
Get a Demo
  • Platform
    The SentinelOne platform delivers the defenses you need to prevent, detect, and undo—known and unknown—threats.
    XDR Platform Overview
    Platform Packages
    SentinelOne for Zero Trust
    • Platform Packages
      • SingularitySingularity CompleteThe Future's Enterprise Security Platform
      • SingularitySingularity ControlSecurity with Suite Features
      • SingularitySingularity CoreCloud-Native NGAV
    • Platform Products
      • SingularitySingularity CloudContainer & Cloud
        Workload Security
      • SingularitySingularity IdentityIdentity Security
      • SentinelOneSentinelOne DataScalable Data Management
      • SingularitySingularity MobileMobile Threat Defense
      • SingularitySingularity RangerNetwork Visibility & Control
      • SingularitySingularity Ranger ADActive Directory Security
      • SingularitySingularity HologramAdversary Deception
      • SingularitySingularity XDR Power ToolsAdvanced XDR tools
  • Why SentinelOne?

    Why SentinelOne?

    SentinelOne is autonomous cybersecurity built for what’s next.

    Why SentinelOne
    Get a Demo
    • Why SentinelOne?
      • Our CustomersOur Customers Trusted by Leading Enterprises Around the Globe
      • About UsAbout Us The Industry Leader in Autonomous Cybersecurity
      • Industry RecognitionIndustry Recognition Tested & Proven
    • Compare SentinelOne
      • Vs CrowdStrike
      • Vs Microsoft Defender EPP+EDR
      • Vs Microsoft Defender XDR
      • Vs McAfee
      • Vs Symantec
      • Vs Carbon Black
      • Vs Palo Alto
      • Vs Trend Micro
    • Verticals
      • Energy
      • Federal Government
      • Finance
      • Healthcare
      • Higher Education
      • K-12 Education
      • Manufacturing
      • Retail
  • Services

    Global Services

    Augment leading technology with trusted expertise, and get set up for success with hands-on support and training.
    Services Overview
    Get Help Now
    • Threat Services
      • Vigilance Respond ProVigilance Respond Pro MDR + DFIR24x7 MDR with Full-Scale
        Investigation & Response
      • Vigilance RespondVigilance Respond MDRDedicated SOC
        Expertise & Analysis
      • WatchTower ProWatchTower Pro Threat HuntingDedicated Threat Hunting
        & Compromise Assessment
      • WatchTowerWatchTower Threat HuntingHunting for Active Campaigns
        & Emerging Threats
    • Support, Deployment, & Health
      • SentinelOne GOSentinelOne GO Guided Onboarding
        & Deployment Advisory
      • Support ServicesSupport Services Tiered Support Options
        for Every Organisation
      • Technical Account ManagementTechnical Account Management Customer Success with
        Personalised Service
      • SentinelOne UniversitySentinelOne University Live & On-Demand Training
  • Partners

    Partner Program

    See how SentinelOne works with trusted names worldwide to enhance programs, process, and technology.
    Program Overview
    • OUR NETWORK
      • Singularity MarketplaceSingularity Marketplace Extend the Power of S1 Technology
      • Technology AlliancesTechnology Alliances See Integrated, Enterprise-Scale Solutions
      • Channel PartnersChannel Partners Deliver the Right Solutions. Together
      • Cyber Risk PartnersCyber Risk Partners Enlist Pro Response & Advisory Terms
      • SentinelOne for AWSSentinelOne for AWS SentinelOne hosted in AWS
        regions around the world.
  • Resources

    Resources

    Your go-to source for the latest SentinelOne digital content, from webinars to white papers, and everything in between.
    Resource Center
    • Resource Center
      • Case Studies
      • Data Sheets
      • eBooks
      • Reports
      • Videos
      • Webinars
      • White Papers
    • Blog
      • Company
      • Cyber Response
      • Data Platform
      • Feature Spotlight
      • For CISO/CIO
      • From the Front Lines
      • Identity
      • Integrations & Partners
      • macOS
      • Podcasts
      • The Good, the Bad and the Ugly
    • Tech Resources
      • Sentinel 101
      • SentinelLabs
  • Company

    Company

    Here you will find all things SentinelOne. See how SentinelOne is redefining cybersecurity by pushing the boundariesof autonomous technology.

    • About SentinelOne
      • About SentinelOneAbout SentinelOne The Industry Leader
        in Cybersecurity
      • CareersCareers The Latest Job Opportunities
      • F1 RacingF1 Racing SentinelOne &
        Aston Martin F1 Team
      • Investor RelationsInvestor Relations Financial Information
        & Events
      • NewsNews Media Coverage & More
      • PressPress Company Announcements
      • FAQFAQ Get Answers to Our Most
        Frequently Asked Questions
      • BrandBrand SentinelOne Brand Guidelines
      • LabsLabs Threat Research for the
        Modern Threat Hunter
      • Cybersecurity BlogCybersecurity Blog The Latest Cybersecurity Threats, News, & More
      • DataSetDataSet The Live Data Platform
Back
  • Platform
    The SentinelOne platform delivers the defenses you need to prevent, detect, and undo—known and unknown—threats.
    XDR Platform Overview
    Platform Packages
    SentinelOne for Zero Trust
    • Platform Packages
      • SingularitySingularity CompleteThe Future's Enterprise Security Platform
      • SingularitySingularity ControlSecurity with Suite Features
      • SingularitySingularity CoreCloud-Native NGAV
    • Platform Products
      • SingularitySingularity CloudContainer & Cloud
        Workload Security
      • SingularitySingularity IdentityIdentity Security
      • SentinelOneSentinelOne DataScalable Data Management
      • SingularitySingularity MobileMobile Threat Defense
      • SingularitySingularity RangerNetwork Visibility & Control
      • SingularitySingularity Ranger ADActive Directory Security
      • SingularitySingularity HologramAdversary Deception
      • SingularitySingularity XDR Power ToolsAdvanced XDR tools
  • Why SentinelOne?

    Why SentinelOne?

    SentinelOne is autonomous cybersecurity built for what’s next.

    Why SentinelOne
    Get a Demo
    • Why SentinelOne?
      • Our CustomersOur Customers Trusted by Leading Enterprises Around the Globe
      • About UsAbout Us The Industry Leader in Autonomous Cybersecurity
      • Industry RecognitionIndustry Recognition Tested & Proven
    • Compare SentinelOne
      • Vs CrowdStrike
      • Vs Microsoft Defender EPP+EDR
      • Vs Microsoft Defender XDR
      • Vs McAfee
      • Vs Symantec
      • Vs Carbon Black
      • Vs Palo Alto
      • Vs Trend Micro
    • Verticals
      • Energy
      • Federal Government
      • Finance
      • Healthcare
      • Higher Education
      • K-12 Education
      • Manufacturing
      • Retail
  • Services

    Global Services

    Augment leading technology with trusted expertise, and get set up for success with hands-on support and training.
    Services Overview
    Get Help Now
    • Threat Services
      • Vigilance Respond ProVigilance Respond Pro MDR + DFIR24x7 MDR with Full-Scale
        Investigation & Response
      • Vigilance RespondVigilance Respond MDRDedicated SOC
        Expertise & Analysis
      • WatchTower ProWatchTower Pro Threat HuntingDedicated Threat Hunting
        & Compromise Assessment
      • WatchTowerWatchTower Threat HuntingHunting for Active Campaigns
        & Emerging Threats
    • Support, Deployment, & Health
      • SentinelOne GOSentinelOne GO Guided Onboarding
        & Deployment Advisory
      • Support ServicesSupport Services Tiered Support Options
        for Every Organisation
      • Technical Account ManagementTechnical Account Management Customer Success with
        Personalised Service
      • SentinelOne UniversitySentinelOne University Live & On-Demand Training
  • Partners

    Partner Program

    See how SentinelOne works with trusted names worldwide to enhance programs, process, and technology.
    Program Overview
    • OUR NETWORK
      • Singularity MarketplaceSingularity Marketplace Extend the Power of S1 Technology
      • Technology AlliancesTechnology Alliances See Integrated, Enterprise-Scale Solutions
      • Channel PartnersChannel Partners Deliver the Right Solutions. Together
      • Cyber Risk PartnersCyber Risk Partners Enlist Pro Response & Advisory Terms
      • SentinelOne for AWSSentinelOne for AWS SentinelOne hosted in AWS
        regions around the world.
  • Resources

    Resources

    Your go-to source for the latest SentinelOne digital content, from webinars to white papers, and everything in between.
    Resource Center
    • Resource Center
      • Case Studies
      • Data Sheets
      • eBooks
      • Reports
      • Videos
      • Webinars
      • White Papers
    • Blog
      • Company
      • Cyber Response
      • Data Platform
      • Feature Spotlight
      • For CISO/CIO
      • From the Front Lines
      • Identity
      • Integrations & Partners
      • macOS
      • Podcasts
      • The Good, the Bad and the Ugly
    • Tech Resources
      • Sentinel 101
      • SentinelLabs
  • Company

    Company

    Here you will find all things SentinelOne. See how SentinelOne is redefining cybersecurity by pushing the boundariesof autonomous technology.

    • About SentinelOne
      • About SentinelOneAbout SentinelOne The Industry Leader
        in Cybersecurity
      • CareersCareers The Latest Job Opportunities
      • F1 RacingF1 Racing SentinelOne &
        Aston Martin F1 Team
      • Investor RelationsInvestor Relations Financial Information
        & Events
      • NewsNews Media Coverage & More
      • PressPress Company Announcements
      • FAQFAQ Get Answers to Our Most
        Frequently Asked Questions
      • BrandBrand SentinelOne Brand Guidelines
      • LabsLabs Threat Research for the
        Modern Threat Hunter
      • Cybersecurity BlogCybersecurity Blog The Latest Cybersecurity Threats, News, & More
      • DataSetDataSet The Live Data Platform
Get a Demo
  • 1-855-868-3733
  • Contact
  • Cybersecurity Blog
Experiencing a Breach?
Ranger®: Network Visibility & Control. A cloud
delivered, software-defined network discovery
solution designed to add global network visibility
and control with minimal friction.
Get a Demo

What’s on your network?

Ranger® extends Sentinel agent function by reporting what it sees on networks and enables blocking of unauthorized devices.

Network
Visibility

Ranger learns the network in a controlled manner with one click. Customizable scanning policies help avoid violating privacy statutes in a frictionless, transparent manner.

Network
Control

When unauthorized devices appear on sensitive networks, Ranger protects managed assets from unauthorized communications with one click.

No New Software or Hardware

Sentinels intelligently elect which agents perform the cloud delivered distributed learning. Ranger does not require added hardware or network changes.

Easy Implementation

  • No new software required. Ranger is part of the SentinelOne agent code base.
  • No network changes required. No network SPAN or TAP ports.
  • Build a policy and toggle it on. Admins can specify a different policy for each network and subnet if needed.
  • Policies provide control over scan intervals and what should be scanned and what must never be scanned.
  • Choose between auto-enabled scanning or require explicit permission if more control is needed over the environment.
Get a Demo

Unparalleled Visibility

  • Ranger is network efficient by intelligently electing a few Sentinel agents per subnet to participate in network mapping missions.
  • Elected “Rangers” passively listen for network broadcast data including ARP, DHCP, and other network observances.
  • Admins may customize active scan policies and specify multiple IP protocols for learning including ICMP, SNMP, UDP, TCP, SMB, and more.
  • Rangers correlate all learned information within the backend to fingerprint known and unknown devices.
  • Ranger reveals vital information about IP-enabled devices and produces inventories in seconds across your region or the globe.

Granular Control

  • Ranger device inventories reveal what is connected where and the protocols these devices listen on.
  • Get easy access to known device information via data collected by Rangers.
  • Find and close Sentinel agent deployment gaps with Ranger Deploy, a peer-to-peer deployment feature.
  • Via Deep Visibility ActiveEDR®, monitor how unknown devices communicate with managed hosts.
  • Isolate suspicious devices from managed devices with a click.

SentinelOne Singularity Ranger FAQ

Can I prevent Ranger from scanning home, coffee shop, and customer networks when my employees are on the road?

Absolutely yes! Ranger policies have several settings to maintain administrative control over what is and is not scanned. A few examples…. You can set a minimum number of Sentinel agents that must be on a subnet before the system event considers it as a possibility. If you set the number at, say 5, small home networks and coffee shops are unlikely to be scanned because you probably will never have 5 work computers on those networks at any one time. Further, administrators can require an explicit “yes, scan this network” from within the SentinelOne Singularity console to further control what is analyzed.

Rogues vs. Ranger. What’s the difference?

Rogues and Ranger are both built into the agent. The capabilities differ based on the purchased license level. Rogues is a free feature included in the Singularity Complete and Singularity Control product bundles and informs administrators which devices on the network still require a Sentinel agent. Ranger is a full featured add-on product with multiple added network visibility and control capabilities that report on all IP-enabled device types.

I am concerned about harming Operational Technology (OT) equipment in factories, power plants, or other industrial settings all of which may run TCP/IP, SCADA, Modbus or other protocols. Or, I simply run sensitive IP-enabled equipment like healthcare modalities (blood pumps, ventilators, and others). I do not want to disrupt the network operation of this critical equipment. Can I use Ranger on these networks?

We understand this concern and have built in per-network policy controls so that you can use every type of scan technique on some networks but then selectively use only certain network learning methods on others. For example, you can turn off active scan probes altogether and just rely on passive network listening on an OT network. Or, you might use passive listening plus ICMP and SNMP active scanning probes but NOT use TCP connect scans because you are worried about destabilizing certain types of control units that use IP and the SCADA protocol. These are just examples. The point is, administrators can mix and match a wide variety of scanning and passive listening techniques on a per network basis to discover what is connected where and how it is communicating.

Does Ranger support the gathering of asset inventories?

Yes! Ranger will build out an asset inventory for every scanned network and let you export the data.

How does Ranger block unknown devices?

When an administrator chooses to block a device, that device is effectively isolated from all SentinelOne managed Windows, Mac, and Linux hosts. This is accomplished using local network control firewall rules as enforced by the Sentinel agent on those devices. SentinelOne continues to build out the Ranger instrumentation to provide additional network access controls in the future.

How will I know if a new, unknown device joins a network I consider to be sensitive?

Ranger combines capabilities with Deep Visibility ActiveEDR and our Storyline Active Response Engine (STAR) to alert you when a new device without a Sentinel agent has connected to the networks of your choice. You may then take the response of your choosing including block communications from the unknown device.

Ready to Take a Look?

Experience cybersecurity that prevents threats at faster speed, greater scale, and higher accuracy.

Explore SentinelOne

Thanks for Contacting Us

A Sentinelone Representative Will Contact You Shortly to Discuss Your Needs.

Related Resources

DATA SHEET

Singularity EPP + EDR

Learn More
DATA SHEET

Vigilance MDR

Learn More
DATA SHEET

Endpoint Protection Bundles

Learn More
DATA SHEET

SentinelOne Ranger IoT

Learn More

The World’s Leading and Largest Enterprises Trust SentinelOne

Including 4 of the Fortune 10 and hundreds of the global 2000

Backed by the Industry

Tried and Trusted by the Industry’s Leading Authorities, Analysts, and Associations.

Endpoint Protection Platforms

  • A Leader in the 2021 Magic Quadrant for Endpoint Protection Platforms
  • Highest Ranked in all Critical Capabilities Report Use Cases
Learn More

Record Breaking ATT&CK Evaluation

  • No missed detections. 100% visibility.
  • Most Analytic Detections 2 yrs running
  • Zero Delays. Zero Config Changes.
Learn More

98% of Gartner Peer Insight™

  • 4.9/5 Rating for Endpoint Protection Platforms and Endpoint Detection and Response Solutions
  • 96% Recommend SentinelOne
Learn More

Explore the Full Power of Singularity

Simplifying container and VM security, no matter their location, for maximum agility, security, and compliance.

Learn More

Endpoint security bedrock for organizations replacing legacy AV or NGAV with an effective EPP that is easy to deploy and manage.

Learn More

Made for organizations seeking the best-of-breed cybersecurity with additional security suite features.

Learn More

Made for organizations seeking enterprise-grade prevention, detection, response and hunting across endpoint, cloud, and IoT.

Learn More

Purpose Built to Prevent Tomorrow’s Threats.

Today.

Your most sensitive data lives on the endpoint and in the cloud. Protect what matters most from cyberattacks. Fortify every edge of the network with realtime autonomous protection.
Get a demo
Company
  • Our Customers
  • Why SentinelOne
  • Platform
  • About
  • Partners
  • Support
  • Careers
  • Legal & Compliance
  • Security & Compliance
  • Contact Us
  • Investor Relations
Resources
  • Blog
  • Labs
  • Hack Chat
  • Press
  • News
  • FAQ
  • Resources
Global Headquarters

444 Castro Street
Suite 400
Mountain View, CA 94041

+1-855-868-3733

[email protected]

Sign Up For Our Newsletter
Thank you! You will now receive our weekly newsletter with all recent blog posts. See you soon!
English
  • English
  • 日本語
  • Deutsch
  • Español
  • Français
  • Italiano
  • Dutch
  • 한국어
©2022 SentinelOne, All Rights Reserved.
Privacy Policy Terms of Service